CVE-2020-23545: Irfanview

High severity, CVSS 7.8. EPSS: 1.3% chance of exploitation in the next 30 days.

IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!ReadXPM_W+0x0000000000000531.

Affected products

• Irfanview Irfanview: version 4.54 only

Published 2021-12-15. Last modified 2026-06-17.